The hackers immediately reset the password and changed the associated email address,

There is no legitimate reason to allow this on an active account. This only happens on a hacked account or an ownership dispute. Freeze the account.

Especially a "verified" account.